Tembria Server Monitor security vulnerability

Weak cryptography, crossite scripting...

Design/Logic Flaw

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The NeffyLauncher 1.0.5 ActiveX control NeffyLauncher.dll in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be us...

CVE-2008-1886

The CVE-2008-1886 issue concerns the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) used in CDNetworks Nefficient Download. The root cause is weak cryptography applied to a KeyCode that blocks unauthorized use of the control, allowing remote attackers to bypass the protection mechanism b...

Raidsonic nas-4220 weak cryptography

Encryption key is stored with data...

Citrix NetScaler weak cryptography

Username/password are stored as a part of cookie with encryption XORing with reused key, making it's possible to discover parts of the password...

Design/Logic Flaw

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2007-5790

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2007-5790

The Globe7 soft phone client 7.3 uses weak cryptography reversed sequence of binary values for the password, which might allow local users to obtain sensitive information...

CVE-2007-5790

The CVE-2007-5790 entry concerns the Globe7 soft phone client 7.3, where the password is protected by weak cryptography described as a reversed sequence of binary values. This vulnerability could allow local users to obtain sensitive information. The available documents state the impact as partia...

CVE-2005-4860

Spectrum Cash Receipting System before 6.504 uses weak cryptography static substitution in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password...

CVE-2005-4860

Spectrum Cash Receipting System prior to version 6.504 is vulnerable due to weak cryptography (static substitution) in the PASSFILE password file, enabling local users to gain privileges by decrypting a password. Affected: Spectrum Cash Receipting System before 6.504. Root cause: use of static su...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

Design/Logic Flaw

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

CVE-2007-4150

The CVE-2007-4150 issue affects Visionsoft Audit 12.4.0.0 (Visionsoft Audit) where weak cryptography (XOR) is used for passwords: during transmission over the network (passwords can be sniffed) and in the configuration file (local read access can reveal passwords). No further exploit details are ...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

PT-2007-5346 · Visionsoft · Visionsoft Audit

Name of the Vulnerable Software and Affected Versions: Visionsoft Audit version 12.4.0.0 Description: The issue concerns the use of weak cryptography, specifically XOR, in two areas: transmitting passwords over the network and storing passwords in a configuration file. This weakness allows remote...

Design/Logic Flaw

The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by 1 discarding random bits by the blowfish::makeivec function in libdar/crypto.cpp that results in predictable and repeating IV values, and 2 direct use of a password for keying, which makes it easier for context-dependent...